Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          9i5WG1qho6vDW5XT75QY28743TwWqsPmC1qdexsVst4=
Subject key identifier:   66:EA:2D:3A:D3:0B:CF:41:59:B2:F3:07:E3:54:5D:9F:86:9E:8A:F3
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       780E1687B7E2DA45CDC5F25E70C9242CA35C383D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:216::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0e:16:87:b7:e2:da:45:cd:c5:f2:5e:70:c9:24:2c:a3:5c:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=66EA2D3AD30BCF4159B2F307E3545D9F869E8AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:81:3a:f2:e5:83:14:1e:c0:da:73:08:b3:
                    4e:ce:f3:90:df:f3:37:74:8d:1d:73:ec:57:ce:62:
                    0b:87:d0:1e:3f:aa:86:74:07:d3:b9:dc:57:2a:da:
                    61:dd:e9:86:45:60:be:66:9c:f4:54:a2:a6:38:82:
                    5a:11:16:72:4c:a8:b0:ef:9c:34:7a:d1:98:40:91:
                    05:0b:5f:b9:4c:ce:94:73:78:58:8e:39:1f:0b:64:
                    21:e7:bb:a5:26:4a:cb:05:36:cf:c9:90:31:c5:20:
                    1a:34:bf:55:1a:74:58:51:38:b0:ac:77:54:be:05:
                    d5:46:b2:d0:b4:df:c5:55:35:fc:a3:e8:30:d4:6e:
                    7c:f1:08:2e:78:83:b0:3b:ec:eb:ba:26:ca:51:c0:
                    f9:bd:25:25:e5:bd:d6:d8:a4:de:dd:5c:e5:6c:fb:
                    6c:7e:9c:6e:42:59:dd:56:1f:03:57:e6:c2:e0:f7:
                    65:b5:5b:3e:32:66:b5:d4:06:02:53:0b:e6:e8:cc:
                    1f:a0:5e:31:86:54:90:c2:43:2b:77:26:f2:6e:5e:
                    64:ea:57:af:4b:5d:7c:95:04:df:f9:09:61:b0:f2:
                    22:88:50:cb:cf:9c:f4:5b:87:9d:fd:38:df:d6:01:
                    b9:5d:18:86:b3:20:9c:b5:ca:49:d5:4d:58:18:d6:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EA:2D:3A:D3:0B:CF:41:59:B2:F3:07:E3:54:5D:9F:86:9E:8A:F3
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:216::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:23:7c:cb:e4:7a:ce:87:73:71:ca:ad:23:59:e5:f0:40:
         64:e9:43:bf:98:19:2a:1e:4f:e5:e0:a8:d2:58:6c:57:c7:dc:
         a1:3d:bc:27:13:4c:aa:11:c8:d6:b3:46:54:23:92:9d:fc:6e:
         b3:ae:8a:5e:c1:4f:f1:92:ca:f5:e7:30:af:9f:c2:f1:36:80:
         5e:ed:ad:6f:39:89:b6:c3:56:d0:50:49:8d:26:e4:f8:72:7f:
         a9:6e:96:8e:18:98:05:79:a7:15:c1:32:f2:0e:2d:49:e4:a3:
         5c:33:75:be:e2:c9:68:5d:57:a2:b0:30:0a:57:ea:da:b0:ab:
         83:36:65:d1:9a:a5:2e:c3:71:c7:58:d7:09:3e:a4:8e:0f:8b:
         6a:0f:d3:ff:a3:ad:c0:c7:df:41:5d:8b:7f:f4:6c:f5:b8:49:
         9f:dd:fc:96:93:aa:cd:a8:fe:c1:4b:40:ed:c1:90:d1:28:fc:
         b1:bd:e3:e1:0e:35:34:f4:d0:94:d2:e5:09:f8:ec:39:4e:80:
         8b:68:8b:c9:e2:4a:7c:2f:8e:1d:db:f0:4d:2a:96:91:ee:dd:
         15:22:0a:f4:79:b2:be:ed:20:2f:24:ce:76:a1:28:05:50:d5:
         af:20:53:63:10:ee:88:e2:78:c4:15:d0:1e:ac:15:1e:a1:85:
         de:59:cc:a4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUeA4Wh7fi2kXNxfJecMkkLKNcOD0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTA2MTIyMzMyWhcNMjYwNTA1MTIyODMy
WjAzMTEwLwYDVQQDEyg2NkVBMkQzQUQzMEJDRjQxNTlCMkYzMDdFMzU0NUQ5Rjg2
OUU4QUYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc6BOvLlgxQe
wNpzCLNOzvOQ3/M3dI0dc+xXzmILh9AeP6qGdAfTudxXKtph3emGRWC+Zpz0VKKm
OIJaERZyTKiw75w0etGYQJEFC1+5TM6Uc3hYjjkfC2Qh57ulJkrLBTbPyZAxxSAa
NL9VGnRYUTiwrHdUvgXVRrLQtN/FVTX8o+gw1G588QgueIOwO+zruibKUcD5vSUl
5b3W2KTe3VzlbPtsfpxuQlndVh8DV+bC4PdltVs+Mma11AYCUwvm6MwfoF4xhlSQ
wkMrdybybl5k6levS118lQTf+QlhsPIiiFDLz5z0W4ed/Tjf1gG5XRiGsyCctcpJ
1U1YGNagDQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGbqLTrTC89BWbLzB+NUXZ+G
norzMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTM2M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhYwDQYJKoZI
hvcNAQELBQADggEBALc9I3zL5HrOh3Nxyq0jWeXwQGTpQ7+YGSoeT+XgqNJYbFfH
3KE9vCcTTKoRyNazRlQjkp38brOuil7BT/GSyvXnMK+fwvE2gF7trW85ibbDVtBQ
SY0m5Phyf6lulo4YmAV5pxXBMvIOLUnko1wzdb7iyWhdV6KwMApX6tqwq4M2ZdGa
pS7DccdY1wk+pI4Pi2oP0/+jrcDH30Fdi3/0bPW4SZ/d/JaTqs2o/sFLQO3BkNEo
/LG94+EONTT00JTS5Qn47DlOgItoi8niSnwvjh3b8E0qlpHu3RUiCvR5sr7tIC8k
znahKAVQ1a8gU2MQ7ojieMQV0B6sFR6hhd5ZzKQ=
-----END CERTIFICATE-----
Generated at Sun May 11 09:12:27 2025 by rpki-client